Aurora is a ransomware group associated with a multi-purpose Go-based malware distributed by multiple criminal teams from mid-2022, also sold as an infostealer/botnet under the same name on underground forums.
Victims (25)
Van Eijck International Car Rescue
NL
Transportation
Discovered: Jul 30, 2026 · Attack est.: Jul 29, 2026
[recovery, rescue] Van Eijck International Car Rescue B.V. — a family-owned Dutch towing and recovery company with 225+ vehicles, 180+ employees, and 20 branch offices across the Netherlands and Spain....
Evosys Laser GmbH
DE
Manufacturing
Discovered: Jul 30, 2026 · Attack est.: Jul 29, 2026
[manufacturer] Evosys Laser GmbH — an Erlangen-based industrial laser welding systems manufacturer with ~130 employees, subsidiaries in the US, China, and a string of Tier 1 automotive customers. The dataset...
Pyramid Analytics B.V.
NL
Technology
Discovered: Jul 30, 2026 · Attack est.: Jul 29, 2026
[analytics] Pyramid Analytics B.V. — a decision-intelligence platform company headquartered in Amsterdam, acquired by ServiceNow (NYSE: NOW) for hundreds of millions of dollars just four months earlier. We obtained the...
Bretford Manufacturing
US
Manufacturing
Discovered: Jul 29, 2026 · Attack est.: Jul 28, 2026
Bretford Manufacturing, Inc. is a privately held manufacturer of charging solutions for mobile devices, founded in 1948 and headquartered in Franklin Park, Illinois. With ~60 employees and ~$10M annual revenue,...
Primed Halberstadt Medizintechnik
DE
Healthcare
Discovered: Jun 30, 2026 · Attack est.: Jun 29, 2026
[manufacturer] *** GmbH — a German manufacturer of medical devices founded in 1946 and now part of the PE-backed PP Medtech group (Wiesmann & Co. KG). The exfiltration captured four...
Corporación Primax S.A.
PE
Retail & E-Commerce
Discovered: Jun 23, 2026 · Attack est.: Jun 22, 2026
[distribution, fuel] ***.A. is Peru's largest fuel distribution company, operating 2,185+ stations across Peru, Ecuador, Colombia, and Uruguay with annualised revenue of approximately USD 3.4 billion (Peru alone). The dataset...
Aerospace & Advanced Composites GmbH
DE
Manufacturing
Discovered: Jun 22, 2026 · Attack est.: Jun 21, 2026
*** (AAC) — an Austrian space-materials R&D company headquartered in Wiener Neustadt, with deep ties to the European Space Agency. Obtained two complete NAS snapshots spanning 30+ years of operations:...
NTP B.V. Civil Engineering Construction
NL
Manufacturing
Discovered: Jun 22, 2026 · Attack est.: Jun 21, 2026
[engineering] NTP B.V. (trading as NTP Infra / NTP Groep) is a Dutch civil engineering contractor headquartered in Hattem, Gelderland. They build roads, lay cables, install sewers, and perform ground...
Kochs GmbH
DE
Manufacturing
Discovered: Jun 22, 2026 · Attack est.: Jun 21, 2026
[manufacturer] *** — a family-owned German manufacturer of windows, doors, and aluminium façade systems headquartered in Herzogenrath, Nordrhein-Westfalen, with ~240 employees across Germany, the Netherlands, and Hungary. The exposed material...
NationsBuilders Insurance Services
Financial Services
Discovered: Jun 22, 2026 · Attack est.: Jun 21, 2026
[insurance] *** (NBIS) is the premier US underwriter of crane & rigging, concrete-pumping, heavy-haul, and residential-builder insurance — a specialty managing general underwriter founded in Atlanta in 2001, acquired by...
Hagerman & Company
Professional Services
Discovered: Jun 19, 2026 · Attack est.: Jun 18, 2026
*** — a 40-year-old Autodesk Platinum Partner headquartered in Mt. Zion, Illinois, serving 250+ enterprise customers across manufacturing, energy, defense, healthcare, and education. The exposed dataset includes: Complete proprietary source...
Allan Brothers Fruit
US
Agriculture and Food Production
Discovered: Jun 16, 2026 · Attack est.: Jun 15, 2026
[food] Allan Brothers, Inc. — a third-generation, family-owned tree-fruit operation headquartered in Naches, Washington. Allan Brothers packs and ships apples and cherries from a 300,000 sq ft cold-storage facility, employing...
Diamond Truck Centres
CA
Transportation
Discovered: Jun 16, 2026 · Attack est.: Jun 15, 2026
[dealership, trucks] *** — Western Canada's largest International Trucks dealership group (9 dealer + 13 sub-dealer locations, ~$63M revenue, 250 employees). The dataset spans 17 years of unbroken operational history...
Sumitomo Electric Bordnetze
DE
Manufacturing
Discovered: Jun 16, 2026 · Attack est.: Jun 15, 2026
[electric] *** SE (SEBN) — a Wolfsburg-headquartered subsidiary of Sumitomo Electric Industries (TSE:5802, ~$31B group revenue), employing approximately 40,000 people across 14 countries. Exfiltrated 1.1 terabytes of data from five...
ALS Global
AU
Professional Services
Discovered: Jun 19, 2026 · Attack est.: Jun 4, 2026
[certification, inspection] ALS Limited (ASX:ALQ) — a global testing, inspection, and certification company with AUD 3.19B revenue, 20,500+ employees, and operations in 65+ countries — identified unauthorised access to its...
Avanti Windows & Doors
US
Manufacturing
Discovered: May 12, 2026 · Attack est.: May 11, 2026
Avanti Windows & Doors — a vinyl window manufacturer headquartered in El Mirage, Arizona, with regional offices across Nevada, Texas, California, and Florida. The exposed material includes: Plaintext SQL Server...
Atlas Metal Industries Inc
CA
Manufacturing
Discovered: Apr 29, 2026 · Attack est.: Apr 28, 2026
[food, metal] Atlas Metal Industries Inc. — a privately held commercial-foodservice-equipment manufacturer headquartered in Miami, Florida. The dataset is a complete Microsoft Dynamics GP environment: production databases, payroll records, system...
Costa Solutions, LLC
US
Professional Services
Discovered: Apr 29, 2026 · Attack est.: Apr 28, 2026
[warehouse] Costa Solutions, LLC — a privately held managed-labor and warehousing company headquartered in San Antonio, Texas, with ~$140M annual revenue and 200–1,000 employees. The file server contained the complete...
Bayou Title, Inc.
US
Financial Services
Discovered: Apr 29, 2026 · Attack est.: Apr 28, 2026
[insurance] Bayou Title, Inc. — the largest title insurance agent and closing/settlement services provider in Louisiana, with 19 full-service locations statewide. The exfiltrated data spans 20+ years of operations (2004–2026)...
Startec Group of Companies
PH
Professional Services
Discovered: May 12, 2026 · Attack est.: Apr 22, 2026
Startec Group of Companies, a privately held Calgary-based industrial OEM founded in 1976 by Joe Cawthorn. Startec designs, fabricates, installs, and services compression, process, and refrigeration systems for oil-and-gas operators...
NorthWest Handling Systems
CA
Transportation
Discovered: May 12, 2026 · Attack est.: Apr 22, 2026
[warehouse] NorthWest Handling Systems — a 55-year-old forklift and warehouse equipment company headquartered in Renton, Washington, with branches across WA, OR, and AK. The dump is the entire corporate file...
Law Offices of Michael A. Freedman, P.A. (maflaw.com)
US
Professional Services
Discovered: Apr 29, 2026 · Attack est.: Apr 22, 2026
[law] Law Offices of Michael A. Freedman, P.A. (maflaw.com). The exfiltrated corpus is 579 GB used / 143 GB at root level / 196,701 files / 19,231 directories, dated as...
Baresque Group
GB
Retail & E-Commerce
Discovered: Apr 29, 2026 · Attack est.: Apr 21, 2026
[design] Baresque Group — a respected commercial-interiors company headquartered in Perth, Australia, with offices in Dallas, Chicago, and Brussels. The exposed material includes: 100+ passport scans, 35 birth certificates, 60+...
Cheval Blanc Randheli
MV
Hospitality
Discovered: Apr 29, 2026 · Attack est.: Apr 21, 2026
[lvmh] Guest Passport Scans — 75,855 Files, 10 Years The single largest data category: 75,855 passport scan images spanning January 2015 through October 2024, organised in daily folders within monthly...
Advanta Genetics LLC
US
Healthcare
Discovered: Apr 29, 2026 · Attack est.: Apr 16, 2026
[health] Advanta Genetics LLC — a respected CLIA/CAP-accredited clinical toxicology and molecular diagnostics laborator. The exposed material includes: Tens of thousands of real patient lives — including highly sensitive chronic...